SALES SYSTEM USING CREDIT CARDS, CREDIT CARD 
VERIFICATION DEVICE, AND CREDIT CARD 


BACKGROUND OF THE INVENTION 
5 1 . Field of the Invention 

The present invention relates to a sales system using credit cards, a credit card 
verification device, and a credit card. More specifically, the present invention relates to 
a sales system using credit cards for supplying goods or services to a customer, and a 
p credit card verification device and a credit card verifiable by the verification unit, which 

Ml 10 are suitable in use for a business or a credit card company using the sales system. 
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2. Description of Related Art 

i~l FIG. 2 is a diagram showing a conventional sales system using a credit card and 
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O procedures for making a payment by using the credit card. 

□ 15 As shown in FIG. 2, payment using a credit card in the above sales system is 

conventionally made by the following procedures: 

1 . a card holder 1 presents a card number to a business 2, for instance, via an 
on-line circuit (Step Al); 

2. the business 2 makes an inquiry to a card company 3 in order to determine 
20 the validity of the card presented by the card holder 1 (Step A2); 

3. the card company 3 determines the validity of the card based on the card 
number and informs the business 2 of the verification result (Step A3); 

4. if it is determined that the card is valid, the business 2 supplies goods or 
services to the card holder 1 (Step A4, Step A5); 

25 5. the business 2 notifies the card company 3 of the card number and the 
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amount billed (Step A6); 

6. the card company 3 pays to the business 2 the amount billed (Step A7); 

7. the card company 3 requests the card holder 1 to make a payment (Step 

A8); and 

5 8. the card holder 1 pays the bill to the card company 3 (Step A9). 

In the above-mentioned conventional payment method using a credit card, 
however, problems such as follows may arise. 

First, the credit card holder 1 must present the card number to the business 2. 
□ Second, the card number may be known to a third party since the number goes 

ftj 10 back and forth among the card holder 1, the business 2, and the card company 3. 

2-f That is, for instance, the business 2, having access to the card number of the 

3^: card holder 1 , may carry out a fraudulent transaction or leak the card number to a third 

p party having dishonest intentions. 

m 

O Accordingly, an object of the present invention is to prevent such leaks of a 

O 15 credit card number and to allow a customer to receive goods or services without 

presenting his/her credit card number. 

SUMMARY OF THE INVENTION 
The present invention provides a sales system using a credit card in which a 
20 card holder presents the credit card to a business that sells goods or services, the 

business, after confirming the validity of the credit card, supplies the goods or services 
to the card holder, including: a credit card containing coded information unique to the 
card holder; and a credit card verification device possessed by the business, the credit 
card verification device comprising a zero-knowledge verification unit based on a zero- 
25 knowledge verification system and being capable of verifying the credit card containing 


coded information based on the zero-knowledge verification system whereby a 
transaction in the sales system using the credit card is carried out without presenting of 
the personal information of the card holder to the business. 

In accordance with another aspect of the invention, the personal information 
includes a card number of the credit card possessed by the card holder. 

In yet another aspect of the invention, the credit card verification device is 
possessed by a card company verifying the credit card. 

The present invention also provides a credit card verification device, including: 
a zero-knowledge verification unit capable of verifying a credit card containing coded 
information unique to a card holder, wherein the zero-knowledge verification unit is 
based on a zero-knowledge verification system and verifies the credit card without 
presenting personal information of the card holder to a business that sells goods or 
services. 

In accordance with another aspect of the invention, the personal information of 
the card holder described in the above credit card verification device includes a card 
number of the credit card possessed by the card holder. 

In yet another aspect of the invention, the credit card verification device is 
possessed by the business that sells goods or services in a sales system using the credit 
card, in which the card holder presents the credit card to the business, and the business, 
after confirming the validity of the credit card, supplies the goods or services to the card 
holder. 

In yet another aspect of the invention, the credit card verification device is 
possessed by a card company verifying the credit card in a sales system using the credit 
card, in which the card holder presents the credit card to the business that sells goods or 
services, and the business, after confirming the validity of the credit card, supplies the 
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goods or services to the card holder. 

The present invention also provides a credit card, including: coded information 
unique to a card holder, wherein the coded information may be decoded by a credit card 
verification device comprising a zero-knowledge verification unit based on a zero- 
5 knowledge verification system whereby a transaction using the credit card is carried out 
without presenting personal information of a card holder to a business that sells goods or 
services. 


0 BRIEF DESCRIPTION OF THE DRAWINGS 

4f 10 Some of the features and advantages of the invention have been described, and 

others will become apparent from the detailed description which follows and from the 
l^l accompanying drawings, in which: 

r| FIG. 1 is a diagram showing a sales system using a credit card and procedures 
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G for making a payment by using the credit card according to an embodiment of the 
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15 present invention; and 

FIG. 2 is a diagram showing a conventional sales system using a credit card and 
procedures for making a payment by using the credit card. 


DETAILED DESCRIPTION OF THE INVENTION 
20 The invention summarized above and defined by the enumerated claims may be 

better understood by referring to the following detailed description, which should be 
read with reference to the accompanying diagram. This detailed description of a 
particular preferred embodiment, set out below to enable one to build and use one 
particular implementation of the invention, is not intended to limit the enumerated 
25 claims, but to serve as a particular example thereof. 


The present invention makes it possible to carry out a transaction using a credit 
card without providing a personal information such as a card number to a business that 
sells goods or services (hereinafter simply referred to as a business). That is, a card 
holder need not present his card number to the business since the validity of the card or 
the identity of the card holder may be verified by a zero-knowledge verification unit. 

FIG. 1 is a diagram showing a sales system using a credit card and procedures 
for making a payment by using the credit card according to an embodiment of the 
present invention. 

According to the sales system of the embodiment of the present invention, a 
card holder 1 , a business 2, and a card company 3 are involved. The card holder 1 
holds a credit card 4, and the business 2 and the card company 3, each, have a zero- 
knowledge verification unit 5 provided with a terminal device (a credit card verification 
device). 

The card company 3 issues the credit card 4 and the credit card 4 is lent to the 
card holder 1 . A characteristic code containing a card number which corresponds to 
the card holder in question is recorded in the credit card 4. The code can be restored 
only by the card holder 1 and the card company 3 . 

The zero-knowledge verification unit 5 is a unit which carries out a zero- 
knowledge verification process and is originally supplied by a reliable organization such 
as a zero-knowledge verification organization. In this embodiment of the present 
invention, it is assumed that the business 2 and the card company 3 possess a reliable 
zero-knowledge verification unit 5 and the organization which supplies the unit 5 is not 
particularly limited. 

Also, the zero-knowledge verification unit 5 is a unit which is capable of 
verifying the identity of a prover (i.e., the card holder 1 in this embodiment) to a verifier 


(i.e., the business 2 in this embodiment) without giving any personal information of the 
prover to the verifier. 

In general, a zero-knowledge verification system is an interactive proof system, 
which is a system based on a challenge-and-response type protocol, and may be used 
when a person (the prover) persuades somebody else (the verifier) without giving any 
information regarding the verification. A typical round in the protocol is constituted by 
a question (challenge) by the verifier and an answer (response) to the question by the 
prover. At the end of the protocol, the verifier determines whether to accept or reject 
the verification based on the answers of the prover to the questions of the verifier. One 
of the characteristics of the zero-knowledge verification system is that the verifier cannot 
prove by himself the answer of the prover even after the protocol is finished. 

The zero-knowledge verification system may be explained by the following 
example of a graph isomorphism type. 

Input: graphs Gj and G 2 having a set { 1 , . . . , n} 

1. repeat steps 2 - 5 for n times; 

2. the prover chooses a permutation n randomly. Calculate the image of G, 
to which the permutation n is applied as H and sends H to the verifier; 

3. the verifier chooses / = 1 or 2 at random and sends it to the prover; 

4. the prover calculates a permutation p of { 1 , . . n} so that the image of Gi 
to which p is applied becomes H. The prover sends p to the verifier (if i = 1 , then 
the prover sets p = tz . If i = 2, then the prover defines p as a synthesis of a and 
7i . Here, o is a certain fixed permutation which makes the image of G 2 equal to G,; 

5. the verifier confirms whether H is the image of Gi to which p is applied; 

and 


6. if H is the image of Gi for all of the rounds which are carried out for n times, 
the verifier accepts the verification of the prover. 

Assume G, = (V, E,) and G 2 = (V, E 2 ). Here, V = {1, 2, 3, 4}, E, = {12, 13, 14, 
34}, and E 2 = {12, 13, 23, 24}. Isomorphism from G 2 to G, is a permutation a = 
(4132). Assume that the prover chooses a permutation k = (2413) at a certain round, 
then H has a branch set {12, 13, 23, 24}. 

If the question of the verifier is / = 1 , then the prover gives a permutation k to 
the verifier and the verifier confirms that the image of G } is H. If the question of the 
verifier is / = 2, then the prover gives the verifier p= noo = (3214) and the verifier 
confirms that the image of G 2 to which p is applied is H. 

The completeness and the soundness of this protocol can be confirmed easily. 
If G, is isomorphic to G 2 , then it is understood that the odds that the verifier accepts is 1 . 
On the other hand, if Gl is not isomorphic to G2, then the only way for the prover to 
cheat the verifier is to correctly guess the value of i for all the rounds and write a 
(random) isomorphic image of Gi. The probability that the prover will correctly 
answer the random questions of the verifier n times is 2' n . 

The above verification system is called the zero-knowledge verification system 
because even if the verifier agrees that G ] is isomorphic to G 2 , he cannot have any 
"knowledge" which can be of help to find the permutation a from G Y to G 2 . At each 
round of the verification, the verifier can obtain only G 1? H which is a random 
isomorphic image of G 2 , and a permutation from one of G! and G 2 to H. 

The zero-knowledge verification unit 5 according to an embodiment of the 
present invention is a unit including information based on the above-mentioned zero- 
knowledge verification system and makes it possible to determine the validity of the 
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credit card 4 of the card holder 1 for the business 2 without giving any personal 
information of the card holder 1 to the business 2. The zero-knowledge verification 
unit 5 may be provided with a terminal device so as to be used as a credit card 
verification device according to an embodiment of the present invention. 

Also, the credit card 4 according to an embodiment of the present invention 
may be made of any kind of materials or can be of any suitable shape as long as it can 
contain information decodable by the zero-knowledge verification unit 5 according to an 
embodiment of the present invention. The decoded information may be recorded in the 
credit card 4 by using any suitable recording means. 

Next, payment procedures using a credit card according to an embodiment of 
the present invention will be described in detail. 

As shown in FIG. 1, when the card holder 1 purchases goods or services of the 
business 2, the card holder 1 presents information (i.e., coded information) of the credit 
card 4 to the business 2. The business 2 confirms that the credit card 4 was actually 
issued by the card company 3 by using the zero-knowledge verification unit 5. The 
verification procedure of the credit card 4 may also be carried out between the business 
2 and the card company 3 using the zero-knowledge verification unit 5 (Step Bl). 

As mentioned above, the zero-knowledge verification unit 5 makes it possible 
to carry out a verification procedure without giving any personal information of the 
prover to the verifier. That is, in this embodiment of the present invention, it is 
possible for the business 2 to obtain verification that the credit card 4 is a valid card 
issued by the card company 3 without giving information such as the personal credit 
card number of the card holder 1 . 

Moreover, by using the zero-knowledge verification unit 5, the business 2 
cannot identify a card holder (or obtain a card number) from the coded information of 


the credit card 4. Accordingly, the business 2 cannot use the card number for dishonest 
intents. 

Further, the problems associated with the conventional method shown in FIG. 2 
may be solved. That is, conventionally, a card number is presented to the business 2 by 
the card holder 1 (Step Al) and then the card number is presented to the card company 3 
by the business 2 (Step A2) as uncoded text. Accordingly, the card number may be 
learned by a third party. This kind of problem may be solved by an embodiment 
according to the present invention. 

The business 2, after confirming the verification of the card 4, supplies goods or 
services to the card holder 1 (Step B2). Then, the business 2 transfers information (i.e., 
coded information) of the credit card 4, which was used upon verification of the card 4, 
to the card company 3. The card company 3 verifies the information of the credit card 
4 by using the zero-knowledge verification unit 5 and decodes the coded information in 
order to specify the card holder 1 . 

The subsequent procedures are basically the same as the ones conventionally 
carried out. That is, the business 2 claims to the card company 3 an amount billed 
(Step B3), the card company 3 pays to the business 2 the amount billed (Step B4), the 
card company 3 requests the card holder 1 to make a payment (Step B5), and the card 
holder 1 pays the bill to the card company 3 (Step B6). In this manner, payment by the 
card holder 1 to the business 2 using the credit card 4 issued by the credit company 3 is 
made. 

Having thus described exemplary embodiments of the invention, it will be 
apparent that various alterations, modifications, and improvements will readily occur to 
those skilled in the art. Such alterations, modifications, and improvements, though not 
expressly described above, are nonetheless intended and implied to be within the spirit 
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and scope of the invention. Accordingly, the foregoing discussion is intended to be 
illustrative only; the invention is limited and defined only by the following claims and 
equivalents thereto. 


